sessions expire after 20 minutes. login page focus